Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b67b6092-559b-348d-81f7-28c1275674bc.roa
File:                     b67b6092-559b-348d-81f7-28c1275674bc.roa (raw, json)
Hash identifier:          lIEqce7ivf5B4fGy5RUMuquXaybDC02IRX84Ab+Wo2c=
Subject key identifier:   1C:CC:3D:29:91:F7:FC:FB:D8:B5:4B:B1:13:06:3C:3B:67:CB:E0:26
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F59C108E45004688B0EC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b67b6092-559b-348d-81f7-28c1275674bc.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397223
IP address blocks:        199.7.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:59:c1:08:e4:50:04:68:8b:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=42cf9fa5-8ce4-465a-a4d3-9a161cde0a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:72:eb:a7:01:b0:03:f0:52:b9:b7:36:ab:
                    33:f3:77:dc:1c:de:77:c4:1e:04:15:2d:07:c3:66:
                    24:6d:e3:2b:68:fd:34:a7:b0:93:ea:b0:7c:46:62:
                    81:1a:ac:11:72:25:5a:73:81:1a:c4:40:f1:11:e6:
                    e6:7d:38:90:69:3f:8f:44:d9:aa:0c:7a:19:ab:4a:
                    78:6d:60:80:dd:38:7c:e5:47:4c:04:df:27:a2:a1:
                    da:fd:7b:60:18:04:72:44:9b:38:14:58:d9:28:f9:
                    99:d1:a7:6b:80:0e:01:8a:83:0b:66:bb:6d:15:13:
                    80:02:95:73:bf:9a:a8:58:08:ed:82:e1:00:c2:59:
                    3f:f6:2c:10:49:29:d8:cb:08:d9:08:8b:ae:8b:c4:
                    c7:40:34:59:b6:91:6d:1c:93:1a:f1:97:97:24:5e:
                    1d:e0:23:ef:ea:94:e8:67:19:14:c2:bb:b2:27:bd:
                    4f:cb:e0:93:57:2a:af:b2:bf:7d:59:04:3a:69:9b:
                    ac:a7:4d:4e:48:85:15:00:db:ea:d3:fb:ef:5f:c0:
                    33:fe:38:9f:46:ac:4c:fe:cd:09:88:06:07:c1:5c:
                    90:d7:1b:f5:0e:2d:dd:e0:6e:ce:bb:1c:62:19:20:
                    e4:65:a3:e3:72:21:5e:cd:cc:57:b7:38:fa:9c:05:
                    28:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CC:3D:29:91:F7:FC:FB:D8:B5:4B:B1:13:06:3C:3B:67:CB:E0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b67b6092-559b-348d-81f7-28c1275674bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:08:c1:72:3a:83:43:14:19:aa:cf:de:90:d7:d4:2c:c8:
         5f:11:ec:e4:ec:93:e8:e3:b7:47:23:44:17:dc:2d:1a:4b:c7:
         d8:35:12:2e:e3:45:a8:54:8b:e7:2b:c4:f8:da:cb:1c:6b:56:
         39:15:88:d6:c4:50:ba:43:b4:bb:b7:61:72:ec:48:00:2f:d2:
         73:ac:fd:bd:ba:15:2b:12:25:43:94:52:d7:c3:91:57:5a:31:
         24:59:5b:62:3f:a8:3d:8c:2e:f3:f0:0d:82:85:c1:9e:f6:cf:
         21:2e:e8:87:e6:e4:07:10:8a:cc:00:e2:d8:c1:09:13:22:e3:
         fc:fb:74:1b:aa:89:17:07:7a:b8:10:91:0b:d1:33:70:ea:00:
         8c:39:8c:9c:a7:4e:b8:6f:61:e6:85:af:36:65:a8:74:63:28:
         9f:c3:17:09:aa:27:fa:5f:86:8e:6c:dc:8a:fa:04:31:a6:00:
         ea:40:01:c4:4b:79:24:b1:39:df:04:cd:72:26:df:9f:04:39:
         c7:13:fe:5c:55:a2:fa:ee:d0:0e:de:92:19:92:52:39:fd:c6:
         22:58:c3:fd:b4:b6:aa:7a:f7:06:ef:d8:b3:1c:54:88:ff:b5:
         ef:f7:44:86:86:19:3b:9d:7c:c9:b9:bf:b7:91:e8:6d:af:1c:
         ce:d1:20:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP1nBCORQBGiLDsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NDJjZjlmYTUtOGNlNC00NjVhLWE0ZDMtOWExNjFjZGUwYTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWJy66cBsAPwUrm3Nqsz83fcHN53xB4EFS0H
w2YkbeMraP00p7CT6rB8RmKBGqwRciVac4EaxEDxEebmfTiQaT+PRNmqDHoZq0p4
bWCA3Th85UdMBN8noqHa/XtgGARyRJs4FFjZKPmZ0adrgA4BioMLZrttFROAApVz
v5qoWAjtguEAwlk/9iwQSSnYywjZCIuui8THQDRZtpFtHJMa8ZeXJF4d4CPv6pTo
ZxkUwruyJ71Py+CTVyqvsr99WQQ6aZusp01OSIUVANvq0/vvX8Az/jifRqxM/s0J
iAYHwVyQ1xv1Di3d4G7OuxxiGSDkZaPjciFezcxXtzj6nAUosQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBzMPSmR9/z72LVLsRMGPDtny+AmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjY3YjYwOTItNTU5Yi0z
NDhkLTgxZjctMjhjMTI3NTY3NGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF86CMFyOoNDFBmqz96Q19QsyF8R7OTsk+jjt0cjRBfcLRpLx9g1Ei7j
RahUi+crxPjayxxrVjkViNbEULpDtLu3YXLsSAAv0nOs/b26FSsSJUOUUtfDkVda
MSRZW2I/qD2MLvPwDYKFwZ72zyEu6Ifm5AcQiswA4tjBCRMi4/z7dBuqiRcHergQ
kQvRM3DqAIw5jJynTrhvYeaFrzZlqHRjKJ/DFwmqJ/pfho5s3Ir6BDGmAOpAAcRL
eSSxOd8EzXIm358EOccT/lxVovru0A7ekhmSUjn9xiJYw/20tqp69wbv2LMcVIj/
te/3RIaGGTudfMm5v7eR6G2vHM7RIBs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:02 2024 by rpki-client on console-ams.rpki-client.org